Implementing CIM With CA Top Secret

Products

• Cleanup
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

Description

Does CA Top Secret have any type of support for CIM? This appears to be a resource class in IBM RACF per the Common Information Users Guide, v1.9, IBM PUB#SC33-7998.

Solution

Here are the generic steps for the CIM implementation:

1. Define the WBEM resource class to the RDT (Resource Descriptor Table) via:
   TSS ADDTO(RDT) RESCLASS(WBEM) ACLST(ALL=FFFF,CONTROL=C400,UPDATE=C000,READ=4000,NONE=0000)
   
   
2. Own the necessary resources via:
   TSS ADD(dept) WBEM(CIMSERV)
   TSS ADD(dept) SURROGAT(BPX.SRV) (may have already been done)
   
   
3. Create the region acid and define the started task to the started task table via:
   TSS CREATE(CIMSERV) TYPE(USER) NAME('CIMSERV Region Acid') PASS(xxxx,0) DEPT(dept)
   TSS PERMIT(CIMSERV) WBEM(CIMSERV) ACC(CONTROL)
   TSS PERMIT(CIMSERV) SURROGAT(BPX.SRV)
   TSS ADDTO(STC) PROCNAME(CFZCIM) ACID(CIMSERV)
   
   
4. Permit access to the users, for example, CIMUSR, via:
   TSS PERMIT(CIMUSR) WBEM(CIMSERV) ACC(READ)
   TSS PERMIT(CIMSERV) SURROGAT(BPX.SRV.CIMUSR) ACC(READ)

Environment

Release:
Component: AWAGNT